Configuring CSC-SSM

Hello John,

I'm assuming that the only way to block malicious web sites and URL filtering is through the SSM?

I guess you could also just apply ACLs but the best way would be through the SSM?

A/ Well as the name said this is a content filtering device, he will apply policies based on what you configured, on the other hand the IPS-SSM will allow al traffic denying only the ones he found is ilegal so I would say yes you are right.

If you purpose the CSC-SSM with Plus LIcense, and configure it, will there by any downtime associated with it,

when you switch the traffic being forwarded to the CSC from the ASA instead of just going out to the ASA and

to the Internet?

A/ No downtime at all, just remember to have the CSC previously setup, a fail-open policy would be great and finally just redirect the traffic to see it working. As soon as the CSC is up and running there will be a peace association

Configuring CSC-SSM

Hello John,

I'm assuming that the only way to block malicious web sites and URL filtering is through the SSM?

I guess you could also just apply ACLs but the best way would be through the SSM?

A/ Well as the name said this is a content filtering device, he will apply policies based on what you configured, on the other hand the IPS-SSM will allow al traffic denying only the ones he found is ilegal so I would say yes you are right.

If you purpose the CSC-SSM with Plus LIcense, and configure it, will there by any downtime associated with it,

when you switch the traffic being forwarded to the CSC from the ASA instead of just going out to the ASA and

to the Internet?

A/ No downtime at all, just remember to have the CSC previously setup, a fail-open policy would be great and finally just redirect the traffic to see it working. As soon as the CSC is up and running there will be a peace association

Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...
view more